TYPO3 ns_backup Extension Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the ns_backup extension for TYPO3, affecting versions through 13.0.0. The issue arises because the extension does not properly encode user input for output in the HTML context of the TYPO3 backend user interface, allowing for the injection of malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users of the ns_backup extension are advised to update to version 13.0.1, available through the TYPO3 extension manager, Packagist, or the TYPO3 Extensions Repository.